Hi Chris, The reason that bug is an enhancement request is because OGS was never designed to work with Always ON VPN. However, because customers are using it in tandem we have decided to redesign the two features so that they may work together. If you would like to see this integration implemented soon please let your Account Manager know so they can follow up with the Anyconnect Product Manager. Regards, Atri
... View more

You'll have to generate the DART bundle. For more information on using the DART tool have a look at Using DART . To install the DART tool on your machine directly(not through the ASA) do the following: 1. download the web deploy pkg file from cisco.com for your OS 2. unzip or unarchive that file and look in the binaries folder 3. there will be an installer with DART in the name. install that file. Now you should be able to run the diagnostic tool
... View more

Indeed the client only looks within a finite range. I am not sure if an enhancement request has been filed for this. Would you be willing to send me a DART file from a machine with this problem? Along with a copy of the hosts file?
... View more

Sorry for the delay in getting back to you guys, but I just came across this post. As of IOS XE3.10, using a GRE Tunnel as a join interface is not supported on ASR1000. The join interface must be a POS interface, GigE interface, GigE sub-interface, Port-channel interface, or Port-channel sub-interface. While you may be able to configure a GRE tunnel interface as the join interface and have it work successfully, it is not an officially supported configuration. This is due to the fact that we need to be able to detect all conditions where an OTV router looses connectivity to the other OTV routers via the join interface. We can do this for the interface types listed but not for the logical interfaces (including Loopbacks, GRE tunnels, etc). You can however configure GetVPN on the phyiscal join interfaces to provide the encryption,
... View more

Hi Jorge, The maximum number of GMs tested on a 3925E is 4000. you'll find the details of the scalability tests here: http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6525/ps9370/ps7180/GETVPN_DIG_version_1_0_External.pdf Hope that helps, Atri.
... View more

Andrew, I have fixed that problem. You should be able to view the details in a couple of days latest. As a TAC engineer I am unable to comment on the timeline for a fix fo this bug. I will try to find the right resource for you if possible, but the best person to contact would be your cisco account manager if you have one. They may be able to get in touch with the product manager and get a possible timeline for you.
... View more

Please refer to bug CSCsg77160. While the automatic detection of proxies may not be added any time soon, the manual addition of proxies for non windows clients should be, please refer to CSCsh73916
... View more